Unrated severityNVD Advisory· Published Jan 24, 2025· Updated Jan 24, 2025
Coolify Vulnerable to Reflected XSS on Tag Search
CVE-2025-24025
Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site scripting. Version 4.0.0-beta.380 fixes the issue.
Affected products
1- Range: < 4.0.0-beta.361
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/coollabsio/coolify/security/advisories/GHSA-f2gf-jvmh-vq73mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.